Re: Help: security?

Marien Kaptein wrote in message <73dnrf$mt5_at_tuegate.tue.nl>...
>Hi all,
>
>I have developped a form-application in forms 4.5. For user to use it they
>must log into the Oracle database server. But I don't want to give users
>those privileges because then they can also use SQL-plus on the database.
>
>Has anyone got a solution for this?

Grant all application object privileges to an application role (some roles) protected by password. Grant this role to your users but alter them so application roles would not default (by "alter user xx default role all except app_role1, app_role2..."). And in your application entry perform "set role app_role1 identified by app_role_passwd1" statement that enables access to application objects. Implementing that the user at the beginning of a session should see only some dictionary objects by default granted to public plus some necessary to your start application.

HTH,
Piotr Kolodziej
pkol_at_otago.gda.pl Received on Tue Nov 24 1998 - 16:41:45 CET